Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
File: qVHmOKLLlcaLvFSicoYFsn9XBoE.mft (raw, json)
Hash identifier: eVZNowGISnBovu6w5bH7LSnFo3Rjt2IhCNktPNZdWwg=
Subject key identifier: 37:FC:0B:D0:2A:DA:A2:F1:A7:23:5D:0E:E7:7C:7C:7D:00:1D:0C:03
Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
Certificate issuer: /CN=a951e638a2cb95c68bbc54a2728605b27f570681
Certificate serial: 019922555974E0BD69C686E7144CB029613B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
Manifest number: 0D28
Signing time: Sun 07 Sep 2025 04:00:42 +0000
Manifest this update: Sun 07 Sep 2025 04:00:42 +0000
Manifest next update: Mon 08 Sep 2025 04:00:42 +0000
Files and hashes: 1: HI_761EI5uyGqmjrDCQMeEJHGzc.roa (hash: QB8Dmgi2EHb5963iec21h5u6pDxN6G7ySEepAThURJA=)
2: qVHmOKLLlcaLvFSicoYFsn9XBoE.crl (hash: gDhqlBO2Mf3q4nx9K049pgLTjJZa95tlR72eGGTRB3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:59:74:e0:bd:69:c6:86:e7:14:4c:b0:29:61:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681
Validity
Not Before: Sep 7 04:00:42 2025 GMT
Not After : Sep 8 04:00:42 2025 GMT
Subject: CN=37fc0bd02adaa2f1a7235d0ee77c7c7d001d0c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:37:79:b4:95:23:1a:72:f4:78:09:22:d1:b5:
c4:62:2f:ac:99:35:a3:48:50:2b:c7:28:af:54:45:
bd:46:9a:c0:a1:70:95:c5:f1:f8:cf:e5:80:40:7c:
63:25:ec:5a:3f:9d:a9:ff:a6:1d:90:f6:21:4b:8d:
8f:80:1b:36:1e:e4:3f:ba:e9:4e:7c:1c:bb:0e:94:
54:a5:2a:59:b4:e8:01:ce:f4:87:31:01:ee:48:a1:
94:dd:71:76:4a:01:09:eb:d4:0f:e1:58:15:03:84:
ea:0f:64:46:86:0d:1e:e9:3c:a6:81:f7:f9:83:1c:
f3:48:b0:4c:c4:95:ef:33:1b:56:ab:a9:82:d8:81:
27:06:61:2f:1b:28:a0:78:5d:15:4d:7c:ba:c2:1b:
6b:1d:f3:61:1d:25:0d:c1:e2:a7:6e:b8:33:b2:96:
1b:55:1f:6e:a2:df:fe:5e:2a:ba:87:04:1f:25:48:
7a:06:1d:61:b7:f6:d2:8d:f2:64:3e:3d:e1:2d:89:
a0:f1:70:30:18:af:aa:35:fd:2b:88:80:0e:72:1d:
33:59:2b:85:a0:00:ec:a3:ce:a5:ab:25:e8:80:14:
72:72:af:de:6b:04:2d:44:c9:51:b9:d4:15:62:6d:
2c:3c:87:63:b6:cb:62:f1:07:b5:af:60:38:09:58:
a6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FC:0B:D0:2A:DA:A2:F1:A7:23:5D:0E:E7:7C:7C:7D:00:1D:0C:03
X509v3 Authority Key Identifier:
keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0b:45:43:01:b7:7f:49:1c:46:a1:00:70:98:46:9d:4f:15:
53:33:b3:6f:e6:f5:07:47:d3:20:dc:48:76:94:1a:98:44:6f:
ba:6f:7a:e0:43:45:85:7a:c3:71:28:20:52:ab:a2:44:f6:bc:
58:4a:88:ea:b4:cc:c2:14:67:21:67:ef:2b:96:c6:32:42:83:
e4:b8:29:e6:31:fa:09:d4:1d:45:77:98:0f:78:4b:6e:82:4d:
05:d1:40:16:74:08:60:cb:97:8b:cd:fa:75:97:83:43:17:1a:
13:ee:8d:c0:29:57:46:48:be:e0:c4:f7:73:de:04:a9:db:07:
ff:72:71:11:d9:1f:91:91:c9:ef:63:71:dd:d3:88:01:d2:43:
a2:44:53:4c:9b:2c:7b:4c:b4:ae:23:64:89:83:35:bb:2b:df:
4f:a9:a7:19:13:7d:b6:54:ba:03:ab:87:87:da:1c:83:2a:1a:
c8:15:2e:7c:49:75:20:e3:9f:14:85:e6:11:6b:c1:cb:3a:7a:
b7:00:e7:39:44:b8:b5:ec:e9:71:c7:40:1e:2d:e8:6b:b8:e8:
07:4a:f5:fe:1b:a6:df:cf:ab:48:9d:32:50:c0:cf:85:44:6b:
47:18:ad:2b:bf:e9:1c:0e:28:18:40:9d:eb:38:14:13:6e:fb:
b0:be:5b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:25 2025 by rpki-client